AI导哈

测试与安全

owasp-audit

briiirussell/cy…y-skills

Audit application source code against the OWASP Top 10:2025 categories — broken access control (incl. SSRF), security misconfiguration, software supply chain failures, cryptographic failures, injection, insecure design, authentication failures, software and data integrity, logging and alerting failures, mishandling of exceptional conditions — with recon, a coverage ledger, per-finding verification, and a findings.json report. Use when the user mentions 'OWASP,' 'OWASP Top 10,' 'security audit,' 'security review,' 'secure code review,' 'code security review,' 'vulnerability audit,' 'find vulnerabilities,' 'appsec review,' 'application security audit,' 'check for security issues,' 'review this PR for security,' 'pre-merge security check,' 'diff review,' 'broken access control,' 'IDOR,' 'SQL injection,' 'XSS,' 'SSRF,' 'webhook security,' or wants to check their codebase for common security weaknesses.

  • 620 次安装
  • 479 星标
  • 收录于

安装命令

npx skills add https://github.com/briiirussell/cybersecurity-skills --skill owasp-audit

SKILL.md

OWASP Audit — Source Code Security Review

Perform a systematic security audit of application source code against the OWASP Top 10:2025. Every candidate is traced, then independently challenged, before it becomes a finding. Coverage is recorded per surface and trust boundary, so "clean" means someone actually read the code.

Cross-references:

  • api-audit for a surface-driven pass over every API endpoint (shares the recon, verification, and orchestration references)
  • web-pentest "Combined white-box + black-box mode" when you have both the source and a running instance you're authorized to test
  • business-logic-testing to prove race conditions and logic flaws dynamically (A06)
  • dependency-audit for the full A03 supply-chain picture; secrets-audit for leaked credentials
  • threat-modeling for the principal / trust-boundary vocabulary used in recon
  • finding-triage to take a single finding from this report to a defensible disposition

Authorization and Mode

Only audit code the user owns or is authorized to review. Any live check (for example curl -I against a deployed origin) needs the same authorization for that host and stays non-destructive.

相关 Skills

web-pentestbriiirussell/cy…y-skillsPerform black-box / grey-box web application penetration testing on an authorized target — auth bypass, IDOR, session handling, business-logic flaws, parameter tampering, Burp Suite / OWASP ZAP workflows. Use when the user mentions 'web pentest,' 'web application penetration test,' 'pentesting,' 'bug bounty,' 'Burp Suite,' 'ZAP,' 'OWASP testing,' 'authentication testing,' 'session testing,' 'authorization testing,' 'web vulnerability testing,' or has explicit authorization to test a live web application.测试与安全572api-auditbriiirussell/cy…y-skillsAudit REST, GraphQL, and RPC APIs against the OWASP API Security Top 10 (2023). Use when the user mentions 'API security,' 'API audit,' 'BOLA,' 'broken object level authorization,' 'BFLA,' 'function-level authorization,' 'mass assignment,' 'API rate limiting,' 'GraphQL security,' 'REST security,' 'API authentication,' 'API authorization,' 'excessive data exposure,' or needs to review API endpoints for security weaknesses.后端与数据库507dependency-auditbriiirussell/cy…y-skillsAudit project dependencies, frameworks, languages, and dev tools for known vulnerabilities, CVEs, and security anti-patterns. Use when the user mentions 'dependency audit,' 'npm audit,' 'CVE,' 'vulnerable packages,' 'supply chain security,' 'outdated dependencies,' 'known vulnerabilities,' 'security advisory,' 'package security,' 'framework vulnerability,' 'is this package safe,' 'pnpm audit,' 'yarn audit,' 'bundle audit,' 'patch this CVE,' 'audit fix broke,' 'lockfile diff,' 'dependency confusion,' 'registry redirection,' 'MCP server pinning,' 'release pipeline,' or needs to check whether their stack, CI, or release pipeline has known security issues.测试与安全492